Cybersecurity Engineer, Senior (ISSM)

Torch Technologies•Kettering, OH

1d•Onsite

About The Position

Torch Technologies is hiring a Senior Cybersecurity Engineer (ISSM) to support its EPASS GB contract in Kettering, Ohio, in the Dayton/WPAFB area. The position supports the AFLCMC/GB Business and Enterprise Systems Directorate and its Automated Project Order (APO) Form System, which supports financial workflows for depot repair workloads. The role provides cybersecurity support to the PMO/Capability Development Manager in accordance with DoDI 8500.01 and related Department of War and Air Force requirements. The ISSM serves as the primary cybersecurity technical advisor to the Authorizing Official (AO), Program Manager (PM), and Information System Owner (ISO). The position integrates cybersecurity throughout the IT lifecycle, assesses and continuously monitors risk, and ensures systems comply with applicable enterprise standards, including the Risk Management Framework (RMF), Cybersecurity Framework (CSF), and NIST standards, as well as the AO’s continuous monitoring strategy. The role also supports system authorization, cybersecurity documentation, configuration-change assessment, security-control evaluation, deficiency tracking, and cybersecurity training and certification for ISSOs and privileged users. This is an onsite role with a Monday–Friday, 8 a.m.–5 p.m. schedule and 0–10% travel. Relocation assistance is not available. The position is not contingent upon contract award.

Requirements

U.S. citizenship.
A master's or doctorate degree in a related field and 10 years of experience in the relevant technical/professional discipline, including five years in the DoW; or a bachelor's degree and 12 years of relevant experience, including five years in the DoW; or 15 years of directly related experience with the required certifications, including eight years in the DoW.
Ability to possess and maintain a T3/Secret clearance.
Highly skilled knowledge and recognized ability in the relevant technical/professional field.
Advanced knowledge of the discipline and comprehensive understanding and ability to apply related standards, procedures, and practices, including program office, enterprise, and staff-level support interfaces.
Experience providing guidance on access control, configuration management, system and communications protection, contingency planning, incident handling, system and information integrity, security and privacy training and awareness, and software development activities and cybersecurity-related software and tools.
Experience performing cybersecurity duties under DoWI 8500.01, AFI 17-130, and AFI 17-1301 for assigned AF IT.
Experience validating, evaluating, and analyzing findings and developer adjudications using automated testing tools such as Fortify, Checkmarx, SonarQube, or AppScan.
Experience using DoW tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests, such as Jira, HP ALM, or eMASS.
Experience conducting ISCM and maintaining awareness of information security, vulnerabilities, and threats to support organizational risk-management decisions under an approved strategy.
Must meet and maintain an advanced (senior) proficiency-level personnel certification associated with the DCWF ISSM work role (722), as outlined in applicable DoD and Air Force guidance. Listed certifications include ISACA CISM; United America Technologies CISSO; FITSI FITSP-M; GIAC GCIA, GCSA, GCIH, GSLC, or GICSP; and (ISC)2 CISSP-ISSMP or CISSP.

Nice To Haves

Certified Scrum Master certification.
Other Agile certifications.
Working knowledge of Agile development methodology.
Experience with Checkmarx, SonarQube, Jira, Confluence, Mavin, Jenkins, or Bitbucket.

Responsibilities

Provide cybersecurity support to the PMO/Capability Development Manager in accordance with DoDI 8500.01.
Serve as the primary cybersecurity technical advisor to the AO, PM, and ISO.
Integrate cybersecurity into the IT lifecycle on behalf of the AO and in accordance with DoDI 8510.01.
Complete and maintain required cybersecurity certification in accordance with AFMAN 17-1303.
Keep AF IT cybersecurity documentation current and accessible to properly authorized individuals.
Support the PM or ISO in maintaining current authorization to operate and approval to connect, when required, and in implementing corrective actions identified in plans of action and milestones.
Coordinate development of an ISCM strategy with the PM and AO staffs, and monitor proposed or actual system and environment changes.
Continuously monitor IT systems and their environments for security-relevant events.
Assess proposed configuration changes for potential effects on cybersecurity posture.
Assess the quality of security-control implementation against performance indicators.
Formally report cybersecurity events or configuration changes that affect AF IT authorization or adversely affect security posture to the AO and other affected parties.
Ensure ISSOs and privileged users receive required technical training, obtain cybersecurity certifications, and maintain proper clearances.
Ensure AF IT is acquired, documented, operated, used, maintained, and disposed of in accordance with DoDI 5000.02 and DoDI 8510.01.
Validate, evaluate, and analyze findings and developer adjudications using automated testing tools.
Use DoW tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests.
Conduct information security continuous monitoring in accordance with the approved ISCM strategy.
Perform cybersecurity duties in accordance with DoWI 8500.01, AFI 17-130, and AFI 17-1301 for assigned AF IT.
Work independently and oversee the efforts of junior and journeyman contractor personnel within the technical/professional discipline.